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WHAT IS CLAIMED IS: 



ru 



A data storing system comprising: 
f a user apparatus which stores data; 
an issuing apparatus which is held by an 
issuer that provides the user apparatus, and issues 
10 and manages a registration certificate; 

a data providing apparatus which is held 
by a data provider that provides data; 

an issuer registration apparatus which is 
held by an issuer registrar that registers and 
15 manages the issuer; and 

a data registration apparatus which is 
held by a data registrar that registers and manages 
the data provider; 

wherein the user apparatus comprises: 
20 registration information generation means 

which generates registration information on a key 
including a user public key or a part of a secret 
key, sends the registration information to the 
issuing apparatus with user information; and 
25 registration verification means which 

verifies a registration certificate, received from 
the issuing apparatus, which is signature 
information or a hash value of the issuer for the 
registration information and the user information, 
30 stores the registration certificate to a storage 
device when the registration certificate is 
verified; 

wherein the issuing apparatus comprises 
registration generation means which generates the 
35 registration certificate and sends the registration 
certificate to the user apparatus. 
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A data storing system comprising: 
5 a user apparatus which stores data; 

an issuing apparatus which is held by an 
issuer that provides the user apparatus, and issues 
and manages a registration certificate; 

a data providing apparatus which is held 
10 by a data provider that provides data; 

an issuer registration apparatus which is 
held by an issuer registrar that registers and 
q manages the issuer; and 

Jj a data registration apparatus which is 

m 

r n 15 held by a data registrar that registers and manages 
p the data provider; 

jjf wherein the user apparatus comprises : 

; s : 

[Tj registration verification means which 

s verifies a registration certificate, received from 

~ 20 the issuing apparatus, which is signature 

~ information or a hash value of the issuer for 

registration information and user information, 
stores the registration certificate to a storage 
device when the registration certificate is 
25 verified; 

wherein the issuing apparatus comprises: 
registration information generation means 
which generates registration Information on a key 
including a user public key or a part of a secret 
30 key and generates user information; 

registration generation means which 
generates the registration certificate and sends the 
registration certificate to the user apparatus. 



35 
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3. The data storing system as claimed in 
claim 1, the user apparatus further comprising: 

means which sends the registration 
certificate and storing data information to the 
5 issuing apparatus; 

means which verifies a storing 
authorization when the storing authorization is 
received from the issuing apparatus; 

means which verifies that the storing data 
10 information corresponds to storing data which is 
acquired; and 

means which stores the storing data into 
q the storage device when it is verified that the 

storing data information corresponds to the storing 

En 

m 15 data; 

□ the issuing apparatus further comprising: 

means which verifies the registration 
[jj certificate and the storing data information which 

£ are received from the user apparatus; 

if 20 means which provides certificate 

fy information to the registration certificate and the 

■J9 storing data information for generating a storing 

~ authorization request when the registration 

certificate and the storing data information are 
25 verified; and 

means which sends the registration 
certificate, the storing data information and the 
storing authorization request to the data providing 
apparatus ; 

30 means which verifies a storing 

authorization which is received from the data 
providing apparatus; and 

means which sends the storing 
authorization to the user apparatus when the storing 
35 authorization is verified; 

the data providing apparatus further 
comprising : 
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means which verifies the storing 
authorization request ; 

means which provides certificate 
information to the storing authorization request and 
the storing data information when the storing 
authorization request is verified for generating a 
storing authorization, and sends the storing 
authorization to the issuing apparatus. 
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s 4. The data storing system as claimed in 

y3 claim 1, the user apparatus further comprising: 

15 means which sends the registration 

HI 

Q certificate and storing data information to the data 

jj? providing apparatus; 

jfj means which verifies a storing 

= authorization when the storing authorization is 

Jr: 20 received from the issuing apparatus; 

means which verifies that the storing data 
-J3 information corresponds to storing data which is 

jrf acquired; and 

means which stores the storing data into 
25 the storage device when it is verified that the 

storing data information corresponds to the storing 
data; 

the data providing apparatus further 
comprising : 

30 means which verifies the registration 

certificate and the storing data information which 
are received from the user apparatus; 

means which provides certificate 
information to the registration certificate and the 

35 storing data information for generating a storing 
authorization request when the registration 
certificate and the storing data information are 
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verified; and 

means which sends the registration 
certificate, the storing data information and the 
storing authorization request to the issuing 
5 apparatus ; 

means which verifies a storing 
authorization which is received from the issuing 
apparatus ; and 

means which sends the storing 
10 authorization to the user apparatus when the storing 
authorization is verified; 

the issuing apparatus further comprising: 
~ means which verifies the storing 

authorization request; 
~ 15 means which provides certificate 

p information to the storing authorization request and 

jjf the storing data information when the storing 

authorization request is verified for generating a 
2 storing authorization, and sends the storing 

rf 20 authorization to the data providing apparatus. 

z iLJ: 

25 5. The data storing system as claimed in 

claim 1, the user apparatus further comprising: 
means which sends the registration 

certificate and storing data information to the data 

providing apparatus ; 
30 means which verifies a storing 

authorization which is received from the data 

providing apparatus ; 

means which verifies that the storing data 

information corresponds to storing data which is 
35 acquired; 

means which stores the storing data in the 
storage device when it is verified that the storing 
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data information corresponds to the storing data; 

the data providing apparatus further 
comprising : 

means which verifies the registration 
5 certificate which is received from the user 
apparatus ; 

means which generates a storing 
authorization wherein certificate information is 
provided to the registration certificate and the 
10 storing data information when the registration 
certificate is verified, and sends the storing 
authorization to the user apparatus. 
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6. The data storing system as claimed in 
claim 1, the issuing apparatus further comprising: 
means which sends information used for 
20 providing certificate information to the issuer 
registration apparatus ; 

means which verifies an issuer 
registration certificate which is received from the 
issuer registration apparatus; 
25 means which stores the issuer registration 

certificate when the issuer registration certificate 
is verified; 

means which generates the registration 
certificate to the user apparatus, and sends the 
30 registration certificate to the user apparatus with 
the issuer registration certificate; 

the issuer registration apparatus further 
comprising : 

means which provides certificate 
35 information to the information used for providing 
the certificate information for generating the 
issuer registration certificate, and sends the 
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issuer registration certificate to the issuing 
apparatus ; 

the user apparatus further comprising: 
means which verifies the registration 
5 certificate and the issuer registration certificate 
which are received from the issuing apparatus; and 

means which stores the registration 
certificate and the issuer registration certificate 
into the storage device when the registration 
10 certificate and the issuer registration certificate 
are verified. 



p 7. The data storing system as claimed in 

claim 3, the data providing apparatus further 
comprising : 

means which sends information used for 
20 providing certificate information to the data 
registration apparatus ; 
C 5 means which verifies data provider 

rf registration certificate received from the data 

registration apparatus, and stores the data provider 
25 registration certificate when the data provider 
registration certificate is verified; 

means which generates storing data with 
certificate information wherein the certificate 
information is provided to the storing data, and 
30 adds the data provider registration certificate to 
the storing data with certificate information; 

the data registration apparatus further 
comprising; 

means which generates the data provider 
35 registration certificate wherein certificate 

information is added to the information which is 
received from the data providing apparatus, and 
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sends the data provider registration certificate to 
the data providing apparatus; 

the user apparatus further comprising; 
means which verifies the storing data with 
5 certificate information which is received from the 
data providing apparatus by using the data provider 
registration certificate, and stores the storing 
data into the storage device when the storing data 
with certificate information is verified. 

10 



^ 8. The data storing system as claimed in 

j^J 15 claim 4, the data providing apparatus further 

Q comprising: 

means which sends information used for 
providing certificate information to the data 
^ registration apparatus; 

if 20 means which verifies data provider 

fy registration certificate received from the data 

U3 registration apparatus, and stores the data provider 

: — k 

5f registration certificate when the data provider 

registration certificate is verified; 

25 means which generates storing data with 

certificate information wherein the certificate 
information is provided to the storing data, and 
adds the data provider registration certificate to 
the storing data with certificate information; 

30 the data registration apparatus further 

comprising ; 

means which generates the data provider 
registration certificate wherein certificate 
information is added to the information which is 

3 5 received from the data providing apparatus, and 

sends the data provider registration certificate to 
the data providing apparatus; 



-46- 



the user apparatus further comprising; 

means which verifies the storing data with 
certificate information which is received from the 
data providing apparatus by using the data provider 
registration certificate, and stores the storing 
data into the storage device when the storing data 
with certificate information is verified. 



10 

9. The data storing system as claimed in 
claim 5, the data providing apparatus further 
y3 comprising: 

{*j 15 means which sends information used for 

q providing certificate information to the data 

registration apparatus; 

means which verifies data provider 
registration certificate received from the data 
20 registration apparatus, and stores the data provider 
registration certificate when the data provider 
S registration certificate is verified; 

!? means which generates storing data with 

~ certificate information wherein the certificate 

25 information is provided to the storing data, and 

adds the data provider registration certificate to 
the storing data with certificate information; 

the data registration apparatus further 
comprising ; 

30 means which generates the data provider 

registration certificate wherein certificate 
information is added to the information which is 
received from the data providing apparatus, and 
sends the data provider registration certificate to 
35 the data providing apparatus; 

the user apparatus further comprising; 
means which verifies the storing data with 
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certificate information which is received from the 
data providing apparatus by using the data provider 
registration certificate, and stores the storing 
data into the storage device when the storing data 
with certificate information is verified. 



10 10. The data storing system as claimed in 

claim 3, the data providing apparatus further 
comprising : 

~ means which sends storing data to be 

U3 stored in the user apparatus and information used 

m 

r~ 15 for providing certificate information to the data 

O registration apparatus; 

the data registration apparatus further 
if* comprising; 

s means which generates data certificate 

2 20 wherein certificate information is added to the 

nj storing information and the information which is 

y3 received from the data providing apparatus , and 

:z sends the data certificate to the data providing 

^ apparatus; 

25 the data providing apparatus further 

comprising : 

means which verifies the data certificate 
received from the data registration apparatus, and 
stores the data certificate when the data 
30 certificate is verified; 

means which sends the storing data and the 
data certificate as storing data with certificate 
information to the user apparatus; 

the user apparatus further comprising; 
35 means which receives and verifies the 

storing data with certificate information, and 
stores the storing data into the storage device when 
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the storing data with certificate information is 
verified. 



11. The data storing system as claimed in 

claim 3, the user apparatus further comprising means 

which deletes the storing data which is in the 
10 storage device. 



15 12. The data storing system as claimed in 

p claim 4, the user apparatus further comprising means 

UJ which deletes the storing data which is in the 

storage device. 

B 20 



13. The data storing system as claimed in 

claim 5, the user apparatus further comprising means 

25 which deletes the storing data which is in the 
storage device. 
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.4. An issuing apparatus in a data storing 
system which comprises: a user apparatus which 
stores data; the issuing apparatus which is held by 
an issuer that provides the user apparatus, and 
35 Issues and manages a registration certificate; a 
data providing apparatus which is held by a data 
provider that provides data; an issuer registration 
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apparatus which is held by an issuer registrar that 
registers and manages the issuer; and a data 
registration apparatus which is held by a data 
registrar that registers and manages the data 
5 provider, the issuing apparatus comprising: 

means which receives user information and 
registration information on a key including a user 
public key or a part of a secret key from the user 
apparatus ; and 
10 registration generation means which 

generates registration certificate from the 
registration information and the user information, 
r% and sends the registration certificate to the user 

^ apparatus . 

O 

uJ 
ru 

5 An ^- ssu ^- n 9 apparatus in a data storing 

2 20 system which comprises: a user apparatus which 

fu stores data; the issuing apparatus which is held by 

*J3 an issuer that provides the user apparatus, and 

issues and manages a registration certificate; a 
data providing apparatus which is held by a data 
25 provider that provides data; an issuer registration 
apparatus which is held by an issuer registrar that 
registers and manages the issuer; and a data 
registration apparatus which is held by a data 
registrar that registers and manages the data 
30 provider, the issuing apparatus comprising: 

means which generates user information and 
registration information on a key including a user 
public key or a part of a secret key; and 

registration generation means which 
35 generates registration certificate from the 

registration information and the user information, 
and sends the registration certificate to the user 
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apparatus . 



5 

16. The issuing apparatus as claimed in 
claim 14, further comprising: 

means which receives the registration 
certificate and storing data information from the 
10 user apparatus; 

means which verifies the registration 
certificate and the storing data information; 

means which provides certificate 
information to the registration certificate and the 
15 storing data information for generating a storing 
authorization request when the registration 
certificate and the storing data information are 
verified; and 

means which sends the registration 
20 certificate, the storing data information and the 

storing authorization request to the data providing 
apparatus ; 

means which verifies a storing 
authorization which is received from the data 
2 5 providing apparatus; and 

means which sends the storing 
authorization to the user apparatus when the storing 
authorization is verified. 

30 

17. The issuing apparatus as claimed in 
claim 14, further comprising: 

35 means which receives the registration 

certificate, storing data information and a storing 
authorization request from the data providing 
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apparatus ; 

means which verifies the storing 
authorization request ; 

means which provides certificate 
information to the storing authorization request and 
the storing data information when the storing 
authorization request is verified for generating a 
storing authorization, and sends the storing 
authorization to the data providing apparatus. 
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18. The issuing apparatus as claimed in 
15 claim 14 , further comprising: 
o means which sends information used for 

y providing certificate information to the issuer 

u\ registration apparatus; 

a means which verifies an issuer 

^ 20 registration certificate which is received from the 

fiy issuer registration apparatus; 

y3 means which stores the issuer registration 

~ certificate when the issuer registration certificate 

is verified; 

25 means which generates the registration 

certificate to the user apparatus, and sends the 
registration certificate to the user apparatus with 
the issuer registration certificate. 

30 



.9. A data providing apparatus in data 
storing system which comprises : a user apparatus 
35 which stores data; an issuing apparatus which is 

held by an issuer that provides the user apparatus, 
and issues and manages a registration certificate; 
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the data providing apparatus which is held by a data 
provider that provides data; an issuer registration 
apparatus which is held by an issuer registrar that 
registers and manages the issuer; and a data 
5 registration apparatus which is held by a data 
registrar that registers and manages the data 
provider, wherein the user apparatus comprises: 

registration information generation means 
which generates registration information on a key 
10 including a user public key or a part of a secret 
key, sends the registration information to the 
issuing apparatus with user information; and 
q registration verification means which 

43 verifies a registration certificate, received from 

f~ 15 the issuing apparatus, which is signature 

Q information or a hash value of the issuer for the 

«f registration information and the user information, 

[J stores the registration certificate to a storage 

= device when the registration certificate is 

y 20 verified; 

SI wherein the issuing apparatus comprises 

ul registration generation means which generates the 

q registration certificate and sends the registration 

certificate to the user apparatus, 
25 the data providing apparatus comprising: 

means which receives the certificate 
registration, storing data information and a storing 
authorization request from the issuing apparatus; 
means which verifies the storing 
30 authorization request; 

means which provides certificate 
information to the storing authorization request and 
the storing data information when the storing 
authorization request is verified for generating a 
35 storing authorization, and sends the storing 
authorization to the issuing apparatus. 
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20. The data providing apparatus as 
5 claimed in claim 19, further comprising: 

means which verifies the registration 
certificate and storing data information which are 
received from the user apparatus; 

means which provides certificate 
10 information to the registration certificate and the 
storing data information for generating a storing 
authorization request when the registration 
q certificate and the storing data information are 

y3 verified; and 

01 

fipj 15 means which sends the registration 

Q certificate, the storing data information and the 

storing authorization request to the issuing 

IT] apparatus ; 

3 means which verifies a storing 

rf 20 authorization which is received from the issuing 

fy apparatus ; and 

s ff means which sends the storing 

S authorization to the user apparatus when the storing 
authorization is verified. 

25 



21. The data providing apparatus as 
30 claimed in claim 19, further comprising: 

means which receives the registration 
certificate and storing data information from the 
user apparatus; 

means which verifies the registration 
3 5 certificate ; 

means which generates a storing 
authorization wherein certificate information is 
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provided to the registration certificate and the 
storing data information when the registration 
certificate is verified, and sends the storing 
authorization to the user apparatus. 



22. The data providing apparatus as 
10 claimed in claim 19, further comprising: 

means which sends information used for 
providing certificate information to the data 
p registration apparatus; 

jG means which verifies data provider 

iJl" 15 registration certificate received from the data 

registration apparatus, and stores the data provider 
registration certificate when the data provider 
registration certificate is verified; 

means which generates storing data with 
20 certificate information wherein the certificate 
information is provided to the storing data, and 
adds the data provider registration certificate to 
the storing data with certificate information; and 
means which sends the data provider 
25 registration certificate and the storing data with 
certificate information to the user apparatus. 
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A computer readable medium storing 
program code for causing a data storing system to 
store data, the data storing system comprising: a 
user apparatus which stores data; an issuing 
35 apparatus which is held by an issuer that provides 
the user apparatus, and issues and manages a 
registration certificate; a data providing apparatus 
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which is held by a data provider that provides data; 
an issuer registration apparatus which is held by an 
issuer registrar that registers and manages the 
issuer; and a data registration apparatus which is 
5 held by a data registrar that registers and manages 
the data provider; the computer readable medium 
comprising : 

registration information generation 
program code means, provided for the user apparatus, 
10 which generates registration information on a key 
including a user public key or a part of a secret 
key, sends the registration information to the 
g issuing apparatus with user information; and 

y3 registration verification program code 

on 

15 means, provided for the user apparatus, which 
O verifies a registration certificate, received from 

jjf the issuing apparatus, which is signature 

information or a hash value of the issuer for the 
registration information and the user information, 
20 stores the registration certificate to a storage 
device when the registration certificate is 
verified; 

registration generation program code means, 
provided for the issuing apparatus, which generates 
25 the registration certificate and sends the 

registration certificate to the user apparatus. 



Lil 
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A computer readable medium storing 
program code for causing a data storing system to 
store data, the data storing system comprising: a 
user apparatus which stores data; an issuing 
35 apparatus which is held by an issuer that provides 
the user apparatus, and issues and manages a 
registration certificate; a data providing apparatus 
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which is held by a data provider that provides data; 
an issuer registration apparatus which is held by an 
issuer registrar that registers and manages the 
issuer; and a data registration apparatus which is 
5 held by a data registrar that registers and manages 
the data provider; the computer readable medium 
comprising : 

registration verification program code 
means, provided for the user apparatus, which 
10 verifies a registration certificate, received from 
the issuing apparatus, which is signature 
information or a hash value of the issuer for 
f~ s registration information and user information, 

sS stores the registration certificate to a storage 

fj. 15 device when the registration certificate is 

q verified; 

W registration information generation 

j~i program code means, provided for the issuing 

= apparatus, which generates registration information 

g 20 on a key including a user public key or a part of a 

^ secret key and generates user information; 

-J3 registration generation program code means, 

g provided for the issuing apparatus, which generates 

~~ the registration certificate and sends the 

25 registration certificate to the user apparatus. 



30 25. The computer readable medium as 

claimed in claim 23, further comprising: 

program code means, provided for the user 
apparatus, which sends the registration certificate 
and storing data information to the issuing 

35 apparatus ; 

program code means, provided for the user 
apparatus, which verifies a storing authorization 
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when the storing authorization is received from the 
issuing apparatus ; 

program code means, provided for the user 
apparatus, which verifies that the storing data 
5 information corresponds to storing data which is 
acquired; and 

program code means, provided for the user 
apparatus, which stores the storing data into the 
storage device when it is verified that the storing 

10 data information corresponds to the storing data; 

program code means, provided for the 
issuing apparatus, which verifies the registration 
certificate and the storing data information which 
are received from the user apparatus; 

15 program code means, provided for the 

issuing apparatus, which provides certificate 
information to the registration certificate and the 
storing data information for generating a storing 
authorization request when the registration 

20 certificate and the storing data information are 
verified; and 

program code means, provided for the 
issuing apparatus, which sends the registration 
certificate, the storing data information and the 

25 storing authorization request to the data providing 
apparatus ; 

program code means, provided for the 
issuing apparatus, which verifies a storing 
authorization which is received from the data 

30 providing apparatus; and 

program code means , provided for the 
issuing apparatus, which sends the storing 
authorization to the user apparatus when the storing 
authorization is verified; 

35 program code means, provided for the data 

providing apparatus, which verifies the storing 
authorization request; 
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program code means, provided for the data 
providing apparatus, which provides certificate 
information to the storing authorization request and 
the storing data information when the storing 
authorization request is verified for generating a 
storing authorization, and sends the storing 
authorization to the issuing apparatus. 



10 



26. The computer readable medium as 
claimed in claim 23, further comprising: 

program code means, provided for the user 
15 apparatus, which sends the registration certificate 
and storing data information to the data providing 
apparatus ; 

program code means, provided for the user 
apparatus, which verifies a storing authorization 

20 when the storing authorization is received from the 
issuing apparatus ; 

program code means, provided for the user 
apparatus, which verifies that the storing data 
information corresponds to storing data which is 

25 acquired; and 

program code means, provided for the user 
apparatus, which stores the storing data into the 
storage device when it is verified that the storing 
data information corresponds to the storing data; 

30 program code means, provided for the data 

providing apparatus, which verifies the registration 
certificate and the storing data information which 
are received from the user apparatus; 

program code means , provided for the data 

35 providing apparatus, which provides certificate 

information to the registration certificate and the 
storing data information for generating a storing 
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authorization request when the registration 
certificate and the storing data information are 
verified; and 

program code means, provided for the data 
5 providing apparatus, which sends the registration 
certificate, the storing data information and the 
storing authorization request to the issuing 
apparatus ; 

program code means, provided for the data 
10 providing apparatus, which verifies a storing 

authorization which is received from the issuing 
apparatus; and 

^ program code means, provided for the data 

y3 providing apparatus, which sends the storing 

fj, 15 authorization to the user apparatus when the storing 

y i 

q authorization is verified; 

program code means, provided for the 
j~j issuing apparatus, which verifies the storing 

= authorization request; 

« 20 program code means, provided for the 

m 

~s s issuing apparatus, which provides certificate 

y3 information to the storing authorization request and 

the storing data information when the storing 

s s 

w authorization request is verified for generating a 

25 storing authorization, and sends the storing 

authorization to the data providing apparatus. 



30 

27. The computer readable medium as 
claimed in claim 23, further comprising: 

program code means, provided for the user 
apparatus, which sends the registration certificate 
35 and storing data information to the data providing 
apparatus ; 

program code means, provided for the user 
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apparatus, which verifies a storing authorization 
which is received from the data providing apparatus; 

program code means, provided for the user 
apparatus, which verifies that the storing data 
5 information corresponds to storing data which is 
acquired; 

program code means, provided for the user 
apparatus, which stores the storing data in the 
storage device when it is verified that the storing 
10 data information corresponds to the storing data; 

program code means, provided for the data 
providing apparatus, which verifies the registration 
certificate which is received from the user 
apparatus ; 

15 program code means, provided for the data 

providing apparatus, which generates a storing 
authorization wherein certificate information is 
provided to the registration certificate and the 
storing data information when the registration 

20 certificate is verified, and sends the storing 
authorization to the user apparatus. 



25 

28. The computer readable medium as 
claimed in claim 23, further comprising: 

program code means, provided for the 
issuing apparatus, which sends information used for 
30 providing certificate information to the issuer 
registration apparatus ; 

program code means, provided for the 
issuing apparatus, which verifies an issuer 
registration certificate which is received from the 
35 issuer registration apparatus; 

program code means, provided for the 
issuing apparatus, which stores the issuer 
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registration certificate when the issuer 
registration certificate is verified; 

program code means, provided for the 
issuing apparatus, which generates the registration 
5 certificate to the user apparatus, and sends the 

registration certificate to the user apparatus with 
the issuer registration certificate; 

program code means, provided for the 
issuer registration apparatus, which provides 
10 certificate information to the information used for 
providing the certificate information for generating 
the issuer registration certificate, and sends the 
issuer registration certificate to the issuing 
apparatus ; 

15 program code means, provided for the user 

apparatus, which verifies the registration 
certificate and the issuer registration certificate 
!)t which are received from the issuing apparatus; and 

s program code means, provided for the user 

«f 20 apparatus, which stores the registration certificate 

JTj and the issuer registration certificate into the 

y3 storage device when the registration certificate and 

= the issuer registration certificate are verified* 

Q 
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29. The computer readable medium as 
claimed in claim 25, further comprising: 

30 program code means, provided for the data 

providing apparatus, which sends information used 
for providing certificate information to the data 
registration apparatus ; 

program code means, provided for the data 

35 providing apparatus, which verifies data provider 
registration certificate received from the data 
registration apparatus, and stores the data provider 



registration certificate when the data provider 
registration certificate is verified; 

program code means, provided for the data 
providing apparatus, which generates storing data 
with certificate information wherein the certificate 
information is provided to the storing data, and 
adds the data provider registration certificate to 
the storing data with certificate information; 

program code means, provided for the data 
registration apparatus, which generates the data 
provider registration certificate wherein 
certificate information is added to the information 
which is received from the data providing apparatus, 
and sends the data provider registration certificate 
to the data providing apparatus; 

program code means, provided for the user 
apparatus, which verifies the storing data with 
certificate information which is received from the 
data providing apparatus by using the data provider 
registration certificate, and stores the storing 
data into the storage device when the storing data 
with certificate information is verified. 



30. The computer readable medium as 
claimed in claim 26, further comprising: 

program code means, provided for the data 
providing apparatus, which sends information used 
for providing certificate information to the data 
registration apparatus ; 

program code means, provided for the data 
providing apparatus, which verifies data provider 
registration certificate received from the data 
registration apparatus, and stores the data provider 
registration certificate when the data provider 
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registration certificate is verified; 

program code means, provided for the data 
providing apparatus, which generates storing data 
with certificate information wherein the certificate 
5 information is provided to the storing data, and 
adds the data provider registration certificate to 
the storing data with certificate information; 

program code means, provided for the data 
registration apparatus, which generates the data 
10 provider registration certificate wherein 

certificate information is added to the information 
which is received from the data providing apparatus, 
pi and sends the data provider registration certificate 

*p to the data providing apparatus; 

Jt! 15 program code means, provided for the user 

H apparatus, which verifies the storing data with 

W certificate information which is received from the 

j]1 data providing apparatus by using the data provider 

= registration certificate, and stores the storing 

E rf 20 data into the storage device when the storing data 

ill 

ffi with certificate information is verified. 

y3 
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31. The computer readable medium as 
claimed in claim 27, further comprising: 

program code means, provided for the data 
providing apparatus, which sends information used 
30 for providing certificate information to the data 
registration apparatus ; 

program code means , provided for the data 
providing apparatus, which verifies data provider 
registration certificate received from the data 
35 registration apparatus, and stores the data provider 
registration certificate when the data provider 
registration certificate is verified; 
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program code means , provided for the data 
providing apparatus, which generates storing data 
with certificate information wherein the certificate 
information is provided to the storing data, and 
5 adds the data provider registration certificate to 
the storing data with certificate information; 

program code means, provided for the data 
registration apparatus, which generates the data 
provider registration certificate wherein 

10 certificate information is added to the information 
which is received from the data providing apparatus , 
and sends the data provider registration certificate 
to the data providing apparatus; 

program code means, provided for the user 

15 apparatus, which verifies the storing data with 

certificate information which is received from the 
data providing apparatus by using the data provider 
registration certificate, and stores the storing 
data into the storage device when the storing data 

20 with certificate information is verified. 



2 5 32. The computer readable medium as 

claimed in claim 25, further comprising: 

program code means, provided for the data 
providing apparatus, which sends storing data to be 
stored in the user apparatus and information used 

30 for providing certificate information to the data 
registration apparatus ; 

program code means, provided for the data 
registration apparatus, which generates data 
certificate wherein certificate information is added 

35 to the storing information and the information which 
is received from the data providing apparatus, and 
sends the data certificate to the data providing 
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apparatus ; 

program code means, provided for the data 
providing apparatus, which verifies the data 
certificate received from the data registration 
5 apparatus, and stores the data certificate when the 
data certificate is verified; 

program code means, provided for the data 
providing apparatus, which sends the storing data 
and the data certificate as storing data with 
10 certificate information to the user apparatus ; 

program code means, provided for the user 
apparatus, which receives and verifies the storing 
data with certificate information, and stores the 
storing data into the storage device when the 
15 storing data with certificate information is 
verified . 
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33. The computer readable medium as 
claimed in claim 25, further comprising: 



y program code means, provided for the user 

~~ apparatus, which deletes the storing data which is 

25 in the storage device. 



30 34. The computer readable medium as 

claimed in claim 26, further comprising: 

program code means, provided for the user 
apparatus, which deletes the storing data which is 
in the storage device. 



35 
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35. The computer readable medium as 
claimed in claim 27, further comprising: 

program code means, provided for the user 
5 apparatus, which deletes the storing data which is 
in the storage device. 



10 / 

1/6 . A computer readable medium storing 
program code for causing an issuing apparatus in a 
g data storing system to perform processes, the data 

y3 storing system comprising: a user apparatus which 

15 stores data; the issuing apparatus which is held by 
an issuer that provides the user apparatus, and 
issues and manages a registration certificate; a 
data providing apparatus which is held by a data 
provider that provides data; an issuer registration 
20 apparatus which is held by an issuer registrar that 
registers and manages the issuer; and a data 
registration apparatus which is held by a data 
registrar that registers and manages the data 
provider, the computer readable medium comprising: 
25 program code means which receives user 

information and registration information on a key 
including a user public key or a part of a secret 
key from the user apparatus; and 

registration generation program code means 
30 which generates registration certificate from the 
registration information and the user information, 
and sends the registration certificate to the user 
apparatus . 



35 
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A computer readable medium storing 
program code for causing an issuing apparatus in a 
data storing system to perform processes, the data 
storing system comprising: a user apparatus which 
5 stores data; the issuing apparatus which is held by 
an issuer that provides the user apparatus, and 
issues and manages a registration certificate; a 
data providing apparatus which is held by a data 
provider that provides data; an issuer registration 
10 apparatus which is held by an issuer registrar that 
registers and manages the issuer; and a data 
registration apparatus which is held by a data 
n registrar that registers and manages the data 

y3 provider, the computer readable medium comprising: 

rL 5 15 program code means which generates user 

□ information and registration information on a key 

y*! including a user public key or a part of a secret 

n * 

key; and 

2 registration generation program code means 

20 which generates registration certificate from the 
hj registration information and the user information, 

J3 and sends the registration certificate to the user 

apparatus * 

25 



38. The computer readable medium as 
claimed in claim 36, further comprising: 
30 program code means which receives the 

registration certificate and storing data 
information from the user apparatus; 

program code means which verifies the 
registration certificate and the storing data 
35 information; 

program code means which provides 
certificate information to the registration 
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certificate and the storing data information for 
generating a storing authorization request when the 
registration certificate and the storing data 
information are verified; and 
5 program code means which sends the 

registration certificate, the storing data 
information and the storing authorization request to 
the data providing apparatus; 

program code means which verifies a 
10 storing authorization which is received from the 
data providing apparatus; and 

program code means which sends the storing 
authorization to the user apparatus when the storing 
J3 authorization is verified. 

5 15 
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= 39. The computer readable medium as 

~ 20 claimed in claim 36, further comprising: 

m program code means which receives the 

yj registration certificate, storing data information 

™ and a storing authorization request from the data 

providing apparatus ; 
25 program code means which verifies the 

storing authorization request; 

program code means which provides 
certificate information to the storing authorization 
request and the storing data information when the 
30 storing authorization request is verified for 

generating a storing authorization, and sends the 
storing authorization to the data providing 
apparatus . 



35 
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40. The computer readable medium as 
claimed in claim 36, further comprising: 

program code means which sends information 
used for providing certificate information to the 
5 issuer registration apparatus; 

program code means which verifies an 
issuer registration certificate which is received 
from the issuer registration apparatus; 

program code means which stores the issuer 
10 registration certificate when the issuer 
registration certificate is verified; 

program code means which generates the 
registration certificate to the user apparatus, and 
sends the registration certificate to the user 
15 apparatus with the issuer registration certificate. 



£ - 5 

A computer readable medium storing 
Sj program code for causing a data providing apparatus 

y3 in a data storing system to perform processes, the 

data storing system comprising: a user apparatus 
which stores data; an issuing apparatus which is 
25 held by an issuer that provides the user apparatus, 
and issues and manages a registration certificate; 
the data providing apparatus which is held by a data 
provider that provides data; an issuer registration 
apparatus which is held by an issuer registrar that 
30 registers and manages the issuer; and a data 

registration apparatus which is held by a data 
registrar that registers and manages the data 
provider, wherein the user apparatus comprises: 

registration information generation means 
35 which generates registration information on a key 
including a user public key or a part of a secret 
key, sends the registration information to the 
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issuing apparatus with user information; and 

registration verification means which 
verifies a registration certificate, received from 
the issuing apparatus, which is signature 
5 information or a hash value of the issuer for the 
registration information and the user information, 
stores the registration certificate to a storage 
device when the registration certificate is 
verified; 

10 wherein the issuing apparatus comprises 

registration generation means which generates the 
registration certificate and sends the registration 
^ certificate to the user apparatus, 

y3 the computer readable medium comprising: 

Hi 15 program code means which receives the 

p certificate registration, storing data information 

W and a storing authorization request from the issuing 

apparatus ; 

program code means which verifies the 
20 storing authorization request; 

program code means which provides 
certificate information to the storing authorization 
request and the storing data information when the 
storing authorization request is verified for 
25 generating a storing authorization, and sends the 
storing authorization to the issuing apparatus. 



30 

42. The computer readable medium as 
claimed in claim 41, further comprising: 

program code means which verifies the 
registration certificate and storing data 
35 information which are received from the user 
apparatus ; 

program code means which provides 
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certificate information to the registration 
certificate and the storing data information for 
generating a storing authorization request when the 
registration certificate and the storing data 
5 information are verified; and 

program code means which sends the 
registration certificate, the storing data 
information and the storing authorization request to 
the issuing apparatus; 
10 program code means which verifies a 

storing authorization which is received from the 
issuing apparatus; and 
f=! program code means which sends the storing 

y3 authorization to the user apparatus when the storing 

*0 15 authorization is verified. 

Ul 
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20 43. The computer readable medium as 

claimed in claim 41, further comprising: 

program code means which receives the 
registration certificate and storing data 
information from the user apparatus; 

2 5 program code means which verifies the 

registration certificate ; 

program code means which generates a 
storing authorization wherein certificate 
information is provided to the registration 

30 certificate and the storing data information when 

the registration certificate is verified, and sends 
the storing authorization to the user apparatus. 



35 



44. The computer readable medium as 
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claimed in claim 41, further comprising: 

program code means which sends information 
used for providing certificate information to the 
data registration apparatus; 
5 program code means which verifies data 

provider registration certificate received from the 
data registration apparatus, and stores the data 
provider registration certificate when the data 
provider registration certificate is verified; 
10 program code means which generates storing 

data with certificate information wherein the 
certificate information is provided to the storing 
data, and adds the data provider registration 
certificate to the storing data with certificate 
15 information; and 

program code means which sends the data 
provider registration certificate and the storing 
data with certificate information to the user 
apparatus . 
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